Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
File: FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft (raw, json)
Hash identifier: TFdpipvyc2ImgRh4er6fFTScMTO8P4oTxeBNTFD+y9g=
Subject key identifier: D7:63:78:9C:51:3C:FA:A9:73:BB:F8:4C:9B:3A:C5:E3:BA:18:7B:AD
Authority key identifier: 15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C
Certificate issuer: /CN=153d757b77067befd9446694748ad2b04e97b38c
Certificate serial: 019DA30A5DC40D6CAE3B840A1044ACA85A6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 00:00:58 +0000
Manifest this update: Sun 19 Apr 2026 00:00:58 +0000
Manifest next update: Mon 20 Apr 2026 00:00:58 +0000
Files and hashes: 1: 2_PmjSq2ymAnVudAlocm7T1tmn4.roa (hash: QSuT7TExW9U0JzR64tb3XYLCTidPjZYgevzpEmIents=)
2: FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl (hash: E1wb+FMAeb/Bvba9lPx1QufJcGikXlTzD3fKJ/bF7Qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:5d:c4:0d:6c:ae:3b:84:0a:10:44:ac:a8:5a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153d757b77067befd9446694748ad2b04e97b38c
Validity
Not Before: Apr 19 00:00:58 2026 GMT
Not After : Apr 20 00:00:58 2026 GMT
Subject: CN=d763789c513cfaa973bbf84c9b3ac5e3ba187bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:38:df:4c:43:c4:22:61:31:d3:4b:32:34:36:
07:6e:dc:8a:34:c9:08:b5:05:7e:8c:5c:e4:97:39:
4d:14:57:9c:43:16:54:ec:36:d1:ff:50:c2:05:eb:
80:4c:30:70:61:fe:9b:0f:86:c3:e9:01:ce:d3:7a:
18:39:81:07:ef:9f:43:f4:18:e9:c0:fc:33:e6:e5:
5c:b5:53:ce:54:73:26:9e:d3:fb:2c:0d:27:08:8d:
32:af:be:6e:b4:c6:f5:94:1f:51:f7:b2:92:11:89:
a8:e9:e1:83:a4:27:d0:db:00:40:df:21:ce:c3:20:
2e:7b:3e:2c:1c:b2:8e:4b:5b:f3:98:c8:fa:e3:fb:
e1:c6:78:20:50:18:3a:33:f3:5d:cf:82:ad:33:62:
72:94:ff:9a:e8:44:d5:34:b5:d4:ed:ee:15:0b:4e:
c3:34:63:b6:a4:d3:e0:21:b1:92:be:9f:3c:c2:88:
b1:85:b1:fc:c2:f0:0b:31:f7:fa:32:55:b4:58:63:
82:03:72:a8:b8:1d:02:f9:51:07:f8:8e:b4:4c:79:
03:18:71:fc:7c:49:c7:a6:1e:f8:47:a4:16:9c:a7:
01:58:e3:41:5e:0d:4a:57:1c:0f:13:0f:1f:5d:97:
18:f1:a5:cf:9e:3d:9e:3b:f0:52:c1:f2:21:ea:38:
80:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:63:78:9C:51:3C:FA:A9:73:BB:F8:4C:9B:3A:C5:E3:BA:18:7B:AD
X509v3 Authority Key Identifier:
keyid:15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:6d:8e:91:79:14:f2:bf:39:db:94:f8:4e:10:25:0f:83:fb:
96:3b:d4:2b:1f:fc:4e:53:c1:78:69:56:b6:5a:0b:2c:7a:7a:
50:29:ec:30:80:9e:0e:d7:df:d0:57:af:f8:2b:e8:dd:6f:f2:
14:36:c7:30:27:91:e4:af:a1:f9:7e:c6:73:ce:ad:f8:69:7e:
f6:13:37:92:a1:58:ca:91:6e:0f:bb:b9:74:89:35:4f:77:34:
61:bf:92:0b:a0:4d:26:69:ea:26:90:17:d1:a4:82:8c:af:6a:
fe:e6:74:59:d7:cc:eb:5d:95:f0:6e:11:47:35:8b:85:a6:78:
f1:d7:e9:ff:c7:25:20:bb:b0:65:64:4b:c6:d8:55:84:de:13:
4e:dc:be:e3:68:ba:69:18:c0:61:52:24:69:7c:eb:c3:59:53:
66:b4:23:01:7b:73:a3:f8:94:50:8c:11:24:c6:bd:3a:c3:cb:
fb:fb:f0:24:de:1c:fd:f0:f3:0a:d1:76:e0:d2:77:c5:d7:d0:
18:e4:dc:9e:c6:eb:51:1f:89:be:0c:66:11:ea:1e:87:fe:c9:
8f:f2:86:70:b0:e1:e9:3e:ca:34:be:4f:c6:4a:f3:d2:0a:2a:
7f:82:8b:cb:54:e5:c1:86:6f:a4:66:06:ba:77:0f:53:d3:b8:
60:4a:8e:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jCl3EDWyuO4QKEESsqFpsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1M2Q3NTdiNzcwNjdiZWZkOTQ0NjY5NDc0OGFkMmIwNGU5
N2IzOGMwHhcNMjYwNDE5MDAwMDU4WhcNMjYwNDIwMDAwMDU4WjAzMTEwLwYDVQQD
EyhkNzYzNzg5YzUxM2NmYWE5NzNiYmY4NGM5YjNhYzVlM2JhMTg3YmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzjfTEPEImEx00syNDYHbtyKNMkI
tQV+jFzklzlNFFecQxZU7DbR/1DCBeuATDBwYf6bD4bD6QHO03oYOYEH759D9Bjp
wPwz5uVctVPOVHMmntP7LA0nCI0yr75utMb1lB9R97KSEYmo6eGDpCfQ2wBA3yHO
wyAuez4sHLKOS1vzmMj64/vhxnggUBg6M/Ndz4KtM2JylP+a6ETVNLXU7e4VC07D
NGO2pNPgIbGSvp88woixhbH8wvALMff6MlW0WGOCA3KouB0C+VEH+I60THkDGHH8
fEnHph74R6QWnKcBWONBXg1KVxwPEw8fXZcY8aXPnj2eO/BSwfIh6jiAuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdjeJxRPPqpc7v4TJs6xeO6GHutMB8GA1UdIwQY
MBaAFBU9dXt3Bnvv2URmlHSK0rBOl7OMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlQxMWUzY0dlLV9aUkdhVWRJclNzRTZYczR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi84YTk0YjktNzBmZS00NmZmLWE0ZTYt
MDE5ZTFmODQwM2RkLzEvRlQxMWUzY0dlLV9aUkdhVWRJclNzRTZYczR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi84YTk0YjktNzBmZS00NmZmLWE0ZTYtMDE5ZTFmODQwM2Rk
LzEvRlQxMWUzY0dlLV9aUkdhVWRJclNzRTZYczR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALm2OkXkU
8r8525T4ThAlD4P7ljvUKx/8TlPBeGlWtloLLHp6UCnsMICeDtff0Fev+Cvo3W/y
FDbHMCeR5K+h+X7Gc86t+Gl+9hM3kqFYypFuD7u5dIk1T3c0Yb+SC6BNJmnqJpAX
0aSCjK9q/uZ0WdfM612V8G4RRzWLhaZ48dfp/8clILuwZWRLxthVhN4TTty+42i6
aRjAYVIkaXzrw1lTZrQjAXtzo/iUUIwRJMa9OsPL+/vwJN4c/fDzCtF24NJ3xdfQ
GOTcnsbrUR+JvgxmEeoeh/7Jj/KGcLDh6T7KNL5Pxkrz0goqf4KLy1TlwYZvpGYG
uncPU9O4YEqOWA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:55:23 2026 by rpki-client